Export limit exceeded: 232350 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (232350 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-112985 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7.5 High |
| Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112986 | 1 Microsoft | 18 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 15 more | 2026-11-11 | 7 High |
| No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112987 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7 High |
| Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112988 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 5.5 Medium |
| Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113749 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7.5 High |
| Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-113754 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 4.7 Medium |
| Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-119867 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 5.3 Medium |
| Improper verification of cryptographic signature in Windows Installer allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-121662 | 1 Microsoft | 1 Visual Studio Code | 2026-11-11 | 8.6 High |
| Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-121664 | 1 Microsoft | 1 Visual Studio Code | 2026-11-11 | 8.3 High |
| Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-113760 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113761 | 1 Microsoft | 2 Windows 11 26h1, Windows 11 26h1 | 2026-11-11 | 7 High |
| Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113765 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-11 | 7.8 High |
| Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113770 | 1 Microsoft | 17 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 14 more | 2026-11-11 | 7 High |
| Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113771 | 1 Microsoft | 2 Windows 11 26h1, Windows 11 26h1 | 2026-11-11 | 5.5 Medium |
| Off-by-one error in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-105018 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 6.6 Medium |
| Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-105531 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 5.5 Medium |
| External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-110061 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112719 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-126759 | 1 H3c | 1 Icg2000 Unified Communication Gateway | 2026-11-11 | 5.3 Medium |
| A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received. | ||||
| CVE-2026-119934 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 8.8 High |
| Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||||